Debian Security Advisory 4003-1


Debian Security Advisory 4003-1 Posted Oct 20, 2017 Authored by Debian | Site Debian Linux Security Advisory 4003-1 – Daniel P. Berrange reported that Libvirt, a virtualisation abstraction library, does not properly handle the default_tls_x509_verify (and related) parameters in qemu.conf when setting up TLS clients and servers in QEMU, resulting in TLS clients for character devices and disk devices having verification turned off and ignoring any errors while validating the server certificate.

Read full news article on Packet Storm